fix: package.json & yarn.lock to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-SEMVER-3247795
- https://snyk.io/vuln/SNYK-JS-LODASH-1040724
- https://snyk.io/vuln/SNYK-JS-JSON5-3182856
- https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3043105
- https://snyk.io/vuln/SNYK-JS-LODASH-1018905
- https://snyk.io/vuln/SNYK-JS-MINIMIST-2429795
- https://snyk.io/vuln/npm:debug:20170905
- https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3042992
- https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3105943

package.json

@@ -2,7 +2,7 @@
   "name": "quran",
   "private": true,
   "dependencies": {
-    "@rails/webpacker": "^5.2.2",
+    "@rails/webpacker": "^5.4.1",
     "bootstrap": "^4.3.1",
     "copy-to-clipboard": "^3.0.8",
     "es6-promise": "^4.2.8",
@@ -19,7 +19,7 @@
     "rails-erb-loader": "^5.5.2",
     "resolve-url-loader": "^4.0.0",
     "sass": "^1.25.0",
-    "sass-loader": "^10",
+    "sass-loader": "^11.0.0",
     "select2": "^4.0.13",
     "serialize-javascript": ">=3.1.0",
     "stimulus": "^1.1.1",